[Libreoffice-commits] core.git: vcl/qa vcl/source

[Caolán McNamara]

 vcl/qa/cppunit/graphicfilter/data/gif/pass/crash-2.gif |binary
 vcl/source/filter/igif/decode.cxx                      |    3 +++
 2 files changed, 3 insertions(+)

New commits:
commit ee35b72064d8d1333709b102b051360018f8044b
Author: Caolán McNamara <caolanm at redhat.com>
Date:   Sun Jul 12 10:56:48 2015 +0100

    fix another gif import crash
    
    Change-Id: I0ffa569e0c4240e11184df7dd56b95d87a12425d

diff --git a/vcl/qa/cppunit/graphicfilter/data/gif/pass/crash-2.gif b/vcl/qa/cppunit/graphicfilter/data/gif/pass/crash-2.gif
new file mode 100644
index 0000000..b7265f8
Binary files /dev/null and b/vcl/qa/cppunit/graphicfilter/data/gif/pass/crash-2.gif differ
diff --git a/vcl/source/filter/igif/decode.cxx b/vcl/source/filter/igif/decode.cxx
index 1b18f5e..2b445e9 100644
--- a/vcl/source/filter/igif/decode.cxx
+++ b/vcl/source/filter/igif/decode.cxx
@@ -193,6 +193,9 @@ bool GIFLZWDecompressor::ProcessOneCode()
 
         nOldCode = nCode;
 
+        if (nCode > 4096)
+            return false;
+
         // write character(/-sequence) of code nCode in the output buffer:
         pE = pTable + nCode;
         do